The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clam_anti-virus | 0.15 (including) | 0.15 (including) |
| Clamav | Clam_anti-virus | 0.20 (including) | 0.20 (including) |
| Clamav | Clam_anti-virus | 0.21 (including) | 0.21 (including) |
| Clamav | Clam_anti-virus | 0.22 (including) | 0.22 (including) |
| Clamav | Clam_anti-virus | 0.23 (including) | 0.23 (including) |
| Clamav | Clam_anti-virus | 0.24 (including) | 0.24 (including) |
| Clamav | Clam_anti-virus | 0.51 (including) | 0.51 (including) |
| Clamav | Clam_anti-virus | 0.52 (including) | 0.52 (including) |
| Clamav | Clam_anti-virus | 0.53 (including) | 0.53 (including) |
| Clamav | Clam_anti-virus | 0.54 (including) | 0.54 (including) |
| Clamav | Clam_anti-virus | 0.60 (including) | 0.60 (including) |
| Clamav | Clam_anti-virus | 0.65 (including) | 0.65 (including) |
| Clamav | Clam_anti-virus | 0.67 (including) | 0.67 (including) |
| Clamav | Clam_anti-virus | 0.68 (including) | 0.68 (including) |
| Clamav | Clam_anti-virus | 0.68.1 (including) | 0.68.1 (including) |
| Clamav | Clam_anti-virus | 0.70 (including) | 0.70 (including) |
| Clamav | Clam_anti-virus | 0.71 (including) | 0.71 (including) |
| Clamav | Clam_anti-virus | 0.72 (including) | 0.72 (including) |
| Clamav | Clam_anti-virus | 0.73 (including) | 0.73 (including) |
| Clamav | Clam_anti-virus | 0.74 (including) | 0.74 (including) |
| Clamav | Clam_anti-virus | 0.75 (including) | 0.75 (including) |
| Clamav | Clam_anti-virus | 0.75.1 (including) | 0.75.1 (including) |
| Clamav | Clam_anti-virus | 0.80 (including) | 0.80 (including) |
| Clamav | Clam_anti-virus | 0.81 (including) | 0.81 (including) |
| Clamav | Clam_anti-virus | 0.82 (including) | 0.82 (including) |
| Clamav | Clam_anti-virus | 0.83 (including) | 0.83 (including) |
| Clamav | Clam_anti-virus | 0.84 (including) | 0.84 (including) |
| Clamav | Clam_anti-virus | 0.85 (including) | 0.85 (including) |
| Clamav | Clam_anti-virus | 0.85.1 (including) | 0.85.1 (including) |
| Clamav | Clam_anti-virus | 0.86 (including) | 0.86 (including) |
| Clamav | Clam_anti-virus | 0.86.1 (including) | 0.86.1 (including) |
| Clamav | Clam_anti-virus | 0.86.2 (including) | 0.86.2 (including) |
| Clamav | Clam_anti-virus | 0.87 (including) | 0.87 (including) |